CVE-2025-30731

CVSS 3.1 Score 3.6 of 10 (low)

Details

Published Apr 15, 2025
Updated: Apr 21, 2025
CWE ID 284

Summary

CVE-2025-30731 is a vulnerability affecting Oracle E-Business Suite's Oracle Applications Technology Stack (component: Configuration). Affected versions include 12.2.3 to 12.2.14. This difficulty-to-exploit issue enables unauthenticated attackers with network access to compromise the Oracle Applications Technology Stack. Successful attacks require human interaction, allowing attackers to gain unauthorized update, insert, or delete access to certain data and unauthorized read access to a limited subset of data. The CVSS Base Score is 3.6 with Confidentiality and Integrity impacts. The CVSS Vector is (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share